Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
File:                     LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json)
Hash identifier:          pZZ/drvDF7Wacw5FBhpvX78w3RM29A1SEOR0DfqI9Ls=
Subject key identifier:   28:28:BE:C8:9B:30:80:F8:4A:CC:1F:88:1F:02:F3:27:4C:49:F1:4A
Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
Certificate issuer:       /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
Manifest number:          A3
Signing time:             Wed 25 Mar 2026 06:30:52 +0000
Manifest this update:     Wed 25 Mar 2026 06:30:52 +0000
Manifest next update:     Wed 01 Apr 2026 06:30:52 +0000
Files and hashes:         1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: r2nNm7n7YW4jixCAzUPwGfMTLXV9CsBppc1FAz42AIE=)
                          2: E62BCC784C9211F09A2E3014C4F9AE02.roa (hash: xT5qy146gRzAu39NzX0c8OhjswZUhA9rByvpjRnnGOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
                          rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
        Validity
            Not Before: Mar 25 06:30:52 2026 GMT
            Not After : Apr  1 06:30:52 2026 GMT
        Subject: CN=69c3811c-1d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:79:70:1b:a2:97:81:d4:13:ee:c2:f0:24:11:
                    84:9a:52:70:3b:3e:44:9c:3d:4e:53:24:23:31:44:
                    7a:44:5d:31:90:2d:ae:01:99:c6:ac:01:c0:8b:ab:
                    3e:c2:40:8d:2a:1e:92:99:94:9b:d1:eb:e7:19:95:
                    a5:ae:b5:1b:f4:fc:50:b5:91:49:1e:7f:27:1a:e5:
                    8d:c3:f3:92:27:bc:f4:1c:e6:05:6f:70:6c:e0:f1:
                    99:5f:bd:d4:61:56:85:b7:b3:15:54:a9:bc:09:1c:
                    ff:9b:c5:0e:0b:67:51:80:13:43:ef:f1:16:b5:1c:
                    26:05:7e:a6:ba:2c:a6:76:db:c1:6c:27:5e:a3:c7:
                    d0:be:30:89:02:37:24:a6:58:30:0e:3f:a0:cb:bd:
                    e0:a0:43:9f:ed:2e:c8:9a:01:42:3d:63:7c:e8:5d:
                    cd:89:44:23:68:76:f4:7f:03:2a:1b:83:bf:fc:ac:
                    36:00:40:5c:cd:f8:12:08:48:26:53:80:2b:75:20:
                    49:b5:fe:9c:1e:3a:27:13:af:15:bf:51:e8:af:1b:
                    13:7a:37:ad:9b:76:5a:13:d4:06:06:c4:47:b7:48:
                    7d:ce:bd:04:83:a7:76:d9:30:2b:a2:db:3c:00:31:
                    18:b4:37:65:47:f8:df:d4:2c:03:f7:79:f8:ca:54:
                    04:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:28:BE:C8:9B:30:80:F8:4A:CC:1F:88:1F:02:F3:27:4C:49:F1:4A
            X509v3 Authority Key Identifier:
                keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3d:1c:48:3f:37:5b:54:79:63:c3:b0:1f:bb:a1:da:24:bf:
         33:bf:d4:b6:b8:27:e2:34:d0:df:bb:d7:86:c5:89:5a:da:f7:
         ec:28:76:ee:15:8e:38:5e:8e:67:27:66:07:c3:41:1a:d2:4c:
         83:2f:0f:e1:e8:1d:9d:cb:04:b2:cd:b7:0f:40:80:81:6c:be:
         b8:f6:0e:1d:62:ce:f5:e1:c3:3f:c7:df:97:95:45:9b:03:2b:
         67:a1:c8:bb:71:69:01:73:5b:f8:7a:31:ce:b3:ea:8b:03:9f:
         69:93:93:51:6c:49:76:55:15:7f:23:44:f2:69:af:05:4b:9a:
         ff:05:cb:2a:f4:2c:e7:53:e7:78:a8:e2:b5:af:53:b3:07:1d:
         83:f9:c4:4b:68:9b:a3:91:14:e1:21:d2:0e:19:cd:46:2e:22:
         b2:43:1d:2f:7e:d1:21:f2:2e:ac:20:a2:05:89:c3:cf:10:d8:
         2a:62:02:b0:10:14:88:94:6c:c2:1e:fd:98:23:f0:f9:32:a3:
         47:73:9b:73:33:3a:af:5f:ee:32:68:6d:ae:64:42:9f:af:3b:
         be:01:04:15:02:f8:16:f2:44:7a:bc:f7:d5:58:c3:a5:74:66:
         93:32:9f:52:b8:23:7b:f6:40:59:fe:b4:95:e6:31:bd:ec:ff:
         73:bd:cc:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU1QjMxMTAvBgNVBAUTKDJEMDFBMTk0MkJBRkQ5RDNCMzFEREJGRTc1MzI0QkFE
NjJCNjA5NTgwHhcNMjYwMzI1MDYzMDUyWhcNMjYwNDAxMDYzMDUyWjAYMRYwFAYD
VQQDEw02OWMzODExYy0xZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA03lwG6KXgdQT7sLwJBGEmlJwOz5EnD1OUyQjMUR6RF0xkC2uAZnGrAHAi6s+
wkCNKh6SmZSb0evnGZWlrrUb9PxQtZFJHn8nGuWNw/OSJ7z0HOYFb3Bs4PGZX73U
YVaFt7MVVKm8CRz/m8UOC2dRgBND7/EWtRwmBX6muiymdtvBbCdeo8fQvjCJAjck
plgwDj+gy73goEOf7S7ImgFCPWN86F3NiUQjaHb0fwMqG4O//Kw2AEBczfgSCEgm
U4ArdSBJtf6cHjonE68Vv1HorxsTejetm3ZaE9QGBsRHt0h9zr0Eg6d22TArots8
ADEYtDdlR/jf1CwD93n4ylQEjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgovsib
MID4SswfiB8C8ydMSfFKMB8GA1UdIwQYMBaAFC0BoZQrr9nTsx3b/nUyS61itglY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTVCMy8yNkIxRTE4QTMx
RUQxMUYwODlEQzc3M0JDNEY5QUUwMi9MUUdobEN1djJkT3pIZHYtZFRKTHJXSzJD
VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xRR2hsQ3V2MmRPekhkdi1kVEpMcldLMkNWZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTVCMy8yNkIxRTE4QTMxRUQxMUYwODlEQzc3M0JDNEY5QUUwMi9MUUdobEN1djJk
T3pIZHYtZFRKTHJXSzJDVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHD0cSD83W1R5Y8OwH7uh2iS/M7/Utrgn4jTQ37vXhsWJWtr37Ch27hWOOF6O
ZydmB8NBGtJMgy8P4egdncsEss23D0CAgWy+uPYOHWLO9eHDP8ffl5VFmwMrZ6HI
u3FpAXNb+HoxzrPqiwOfaZOTUWxJdlUVfyNE8mmvBUua/wXLKvQs51PneKjita9T
swcdg/nES2ibo5EU4SHSDhnNRi4iskMdL37RIfIurCCiBYnDzxDYKmICsBAUiJRs
wh79mCPw+TKjR3ObczM6r1/uMmhtrmRCn687vgEEFQL4FvJEerz31VjDpXRmkzKf
Urgje/ZAWf60leYxvez/c73MAg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:19 2026 by rpki-client